Workfront is changing the way we manage users and passwords. The enhanced authentication experience will release in a phased approach. The end result will be a consistent and more secure sign-in experience across all Workfront products and services. 

• Authentication Functionality Comparison
• Configuring and Managing the Enhanced Authentication Experience for Your Organization as the Workfront Administrator
• Logging In to Workfront with the Enhanced Authentication Configured
• Using Legacy Authentication (for Organizations Not Yet Migrated to the Enhanced Authentication Experience) 

Authentication Functionality Comparison

The following table provides details about current and future functionality:

Configuring and Managing the Enhanced Authentication Experience for Your Organization as the Workfront Administrator

If you cannot complete the steps described in this section, your organization has not yet been migrated to the Enhanced authentication experience. The migration is happening as a phased rollout, and you will be notified prior to your organization being migrated. Until then, follow the steps in Using Legacy Authentication (for Organizations Not Yet Migrated to the Enhanced Authentication Experience).

The following sections describe how to configure and manage the enhanced authentication experience:

• Changing Matching Emails
• Configuring Your Email System to Allow Emails for Enhanced Authentication
• Configuring Password Policies for Enhanced Authentication
• Updating SAML 2.0 Metadata in Your Identity Provider
• Configuring the Enhanced Authentication Experience for Your Organization as the Workfront administrator
• Resetting Passwords for Users as the Workfront Administrator
• Resetting Your Administrator Password

Changing Matching Emails

When using the enhanced authentication experience, an email address can be used in the same customer account only once (even with different uppercase and lowercase combinations). You must change any matching emails before your organization is migrated.

Configuring Your Email System to Allow Emails for Enhanced Authentication

You should configure your email system to allow emails from the following email address:

no-reply@verificationemail.com

This is the email address Workfront uses to send emails to users for the following purposes:

• The confirmation email when resetting the password for the enhanced authentication experience, as described in "Logging In to Workfront with the Enhanced Authentication Experience Configured."
• The welcome email that is sent after the user successfully configures the enhanced authentication experience. 

If you do not configure your email system to allow emails from this address, these important emails might go to the user's spam folder.

Configuring Password Policies for Enhanced Authentication

For information about how to configure password policies for the enhanced authentication experience, see "Configuring Enhanced Authentication" in the article "Configuring Password Policies for Authentication."

Updating SAML 2.0 Metadata in Your Identity Provider

For information about configuring SAML 2.0 metadata, see "Updating SAML 2.0 Metadata in Your Identity Provider When Using the Enhanced Authentication Experience"

Resetting Passwords for Users as the Workfront Administrator

With the enhanced authentication experience, you can no longer manually reset another user's password when editing a user as a Workfront administrator. Instead, you can initiate a Forgot Password email.

NOTE Users must have a valid email address to be able to retrieve their password.

To send the Forgot Password email:

1. Go to the People area, then click the People tab. 
2. Select the users whose passwords you want to reset.
3. Click More > Send Forgot Password Email.
   

Resetting Your Administrator Password

1. Click your profile picture in the upper-right corner of the Workfront interface, then click My Settings.
2. In the My Settings dialog box, click Reset Password.
   A new pop-up is displayed where you can specify your new password.
   
   
3. After you confirm your new password, you should receive a confirmation email. Go to your email inbox and look for an email from "no-reply@verificationemail.com". This email might be in your spam folder.

Logging In to Workfront with the Enhanced Authentication Experience Configured

NOTE The migration affects only Production accounts. Use your existing login credentials when accessing Preview or Sandbox instances of Workfront.

The first time you log in to Workfront after your organization is upgraded to the enhanced authentication experience:

1. In a web browser, go to your Workfront site.
   
2. Use your current Workfront login credentials to log in to the Workfront site.
3. When prompted, reset your password.
   You can use your existing password if it complies with the new password requirements.
   

Using Legacy Authentication (for Organizations Not Yet Migrated to the Enhanced Authentication Experience)

If your organization has not yet been migrated to the enhanced authentication experience, you must continue to use the legacy form of authentication until your organization is migrated to the new form of authentication.

For information about how to view or modify legacy authentication settings, see "Configuring Legacy Authentication" in the article "Configuring Password Policies for Authentication."